$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/C16E8E16256511EA98F3D465C4F9AE02.roa File: C16E8E16256511EA98F3D465C4F9AE02.roa (raw, json) Hash identifier: /MAfFsCX3raA/f7POApleax8y0KylFoyhT7LCg2+x5I= Subject key identifier: 08:BC:D0:92:5C:B3:B9:19:98:CF:84:A5:1F:B3:18:7B:52:25:94:81 Certificate issuer: /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Certificate serial: 0D36 Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/C16E8E16256511EA98F3D465C4F9AE02.roa Signing time: Wed 20 Dec 2023 18:46:31 +0000 ROA not before: Wed 20 Dec 2023 18:46:31 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 23881 IP address blocks: 45.121.200.0/24 maxlen: 24 45.121.201.0/24 maxlen: 24 45.121.203.0/24 maxlen: 24 103.15.192.0/24 maxlen: 24 103.15.194.0/24 maxlen: 24 103.15.195.0/24 maxlen: 24 203.90.224.0/24 maxlen: 24 203.90.225.0/24 maxlen: 24 203.90.226.0/24 maxlen: 24 203.90.227.0/24 maxlen: 24 203.90.228.0/24 maxlen: 24 203.90.229.0/24 maxlen: 24 203.90.230.0/24 maxlen: 24 203.90.252.0/24 maxlen: 24 203.90.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3382 (0xd36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Validity Not Before: Dec 20 18:46:31 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65833687-b66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ed:fe:26:c1:0f:ef:3e:a1:7e:b5:83:24:59: c1:97:32:b9:98:bb:ca:81:5a:49:9d:1d:01:20:c3: 6d:ea:f8:29:a9:38:35:a9:ad:25:fe:c4:a3:5a:9f: 40:f0:52:8e:13:f2:0b:ea:dd:03:c5:64:d3:63:11: 55:4d:27:7d:dc:1f:22:4d:6d:1b:e5:7d:2b:db:77: 21:07:60:df:ec:9d:9a:5e:8e:fe:6d:98:50:25:17: 02:53:78:21:53:15:00:57:12:56:c9:a2:c7:42:62: 27:a1:03:6b:80:6e:cb:ab:d8:4d:00:2d:69:58:91: e5:af:f9:d9:a7:fd:1d:f2:3d:f8:d4:6b:ec:6d:71: 90:06:44:cf:bf:f1:39:61:e7:a7:24:ad:c6:8e:ab: 39:61:0e:d5:51:2d:ca:a8:33:ce:f7:ab:d2:0f:b2: e5:3c:72:47:c8:83:04:20:bc:67:b2:ed:9b:ed:db: b7:32:51:4f:40:40:27:23:67:d4:1f:91:37:2b:c4: 1e:f3:05:63:97:8a:8f:ca:1f:24:26:9c:66:c7:9d: b5:5b:93:55:62:3a:42:ef:f6:a6:68:de:76:1b:8b: 02:52:b5:42:0c:a6:23:fe:c8:cf:3e:db:20:a9:f1: 95:0f:af:ec:f0:46:d2:19:b1:60:1f:aa:1f:24:41: 81:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BC:D0:92:5C:B3:B9:19:98:CF:84:A5:1F:B3:18:7B:52:25:94:81 X509v3 Authority Key Identifier: keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/C16E8E16256511EA98F3D465C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.121.200.0/23 45.121.203.0/24 103.15.192.0/24 103.15.194.0/23 203.90.224.0-203.90.230.255 203.90.252.0/24 203.90.254.0/24 Signature Algorithm: sha256WithRSAEncryption 61:23:51:ee:b8:ef:f6:9b:74:07:10:ac:e1:ef:2e:c8:01:ee: aa:99:e9:80:f3:3d:05:66:0f:96:c9:4e:da:75:f7:8f:09:a0: 64:fa:fc:d2:fa:f2:98:97:1d:d9:8d:fb:ad:58:12:f2:43:d9: c5:3d:a2:ca:e7:1c:80:ae:fa:4c:f3:6d:41:6b:54:b5:5f:9e: 6e:4f:0f:bb:35:a0:5e:f8:67:4a:1d:8c:6b:88:14:dc:30:90: c9:3f:88:ea:33:16:05:21:8b:91:28:50:85:73:f1:f1:72:63: ce:86:0d:af:f9:8c:87:96:0d:d9:dc:9c:be:d7:17:3a:f0:b0: 4f:1f:0d:af:b9:8b:5d:65:dc:76:09:18:42:73:8e:81:45:0e: b2:32:66:39:da:d1:56:95:ad:8e:e9:da:35:bf:48:b2:88:ff: 5c:67:2e:a3:d6:91:2f:18:e0:48:86:f1:9d:d1:e3:d2:65:c2: 32:82:29:e5:89:44:36:b7:4a:b8:13:b2:d3:e8:36:9a:47:3b: 0a:ce:be:af:25:47:af:98:c0:aa:b4:eb:39:cb:ee:76:ea:e2: cb:af:8f:7b:1a:8d:ce:58:99:a7:98:ef:56:b6:ee:71:f8:3a: 41:89:8a:d2:54:bc:16:2a:36:f4:fe:78:c6:4c:e0:de:a4:d0: 87:b5:e8:f2 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgICDTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBREExMTAvBgNVBAUTKEM0MTcxNUZFRjIwMDEzM0Q5MTIzMjUwRkJCNjUzMUU4 OEE0QTk5REEwHhcNMjMxMjIwMTg0NjMxWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTgzMzY4Ny1iNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAru3+JsEP7z6hfrWDJFnBlzK5mLvKgVpJnR0BIMNt6vgpqTg1qa0l/sSjWp9A 8FKOE/IL6t0DxWTTYxFVTSd93B8iTW0b5X0r23chB2Df7J2aXo7+bZhQJRcCU3gh UxUAVxJWyaLHQmInoQNrgG7Lq9hNAC1pWJHlr/nZp/0d8j341GvsbXGQBkTPv/E5 YeenJK3Gjqs5YQ7VUS3KqDPO96vSD7LlPHJHyIMEILxnsu2b7du3MlFPQEAnI2fU H5E3K8Qe8wVjl4qPyh8kJpxmx521W5NVYjpC7/amaN52G4sCUrVCDKYj/sjPPtsg qfGVD6/s8EbSGbFgH6ofJEGB7QIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFAi80JJc s7kZmM+EpR+zGHtSJZSBMB8GA1UdIwQYMBaAFMQXFf7yABM9kSMlD7tlMeiKSpna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUFEQS9GRjMyMDFDRUE2 QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6MlJJeVVQdTJVeDZJcEtt ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCY1ZfdklBRXoyUkl5VVB1MlV4NklwS21kby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjlBREEvRkYzMjAxQ0VBNkIyMTFFOThEMkIxODYwQzRGOUFFMDIvQzE2RThFMTYy NTY1MTFFQTk4RjNENDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSwYIKwYBBQUHAQcBAf8E PDA6MDgEAgABMDIDBAEtecgDBAAtecsDBABnD8ADBAFnD8IwDAMEBcta4AMEAMta 5gMEAMta/AMEAMta/jANBgkqhkiG9w0BAQsFAAOCAQEAYSNR7rjv9pt0BxCs4e8u yAHuqpnpgPM9BWYPlslO2nX3jwmgZPr80vrymJcd2Y37rVgS8kPZxT2iyuccgK76 TPNtQWtUtV+ebk8PuzWgXvhnSh2Ma4gU3DCQyT+I6jMWBSGLkShQhXPx8XJjzoYN r/mMh5YN2dycvtcXOvCwTx8Nr7mLXWXcdgkYQnOOgUUOsjJmOdrRVpWtjunaNb9I soj/XGcuo9aRLxjgSIbxndHj0mXCMoIp5YlENrdKuBOy0+g2mkc7Cs6+ryVHr5jA qrTrOcvuduriy6+PexqNzliZp5jvVrbucfg6QYmK0lS8Fio29P54xkzg3qTQh7Xo 8g== -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org